Privacy policy

• Contact data: name, phone number, e-mail — when you apply, subscribe or register.
• Application data: desired amount, term, city, income, employment — only what you enter yourself for a specific product.
• Identification data: PIN, passport series and number — only when signing in via Tunduk ID or applying for a product that requires identification, with your separate consent.
• Technical data: IP address, device type, cookies, pages viewed — collected automatically.

We do not collect biometric data, health data or other special categories of personal data.

• transferring your application to the Partner you chose and informing you of its status;
• operating the personal dashboard and saving your calculations;
• sending the newsletter — only if you subscribed, with an unsubscribe link in every e-mail;
• improving the Service, statistics and fraud prevention;
• complying with Kyrgyz law, including requests from authorised bodies.

Processing is based on your consent given by ticking the box in a form, and on the performance of our agreement with you (Article 5 of the Law on Personal Data). Consent may be withdrawn at any time by e-mailing privacy@finmarket.kg; after withdrawal the data is deleted within 30 days, except where the law sets a retention period.

Application data is shared only with the Partner you chose and only to the extent needed to review the application. Each Partner is an independent data holder and processes data under its own policy.

We also use processors: cloud hosting in Kyrgyzstan, an SMS gateway for verification codes, analytics services. Cross-border transfers go only to countries with adequate data protection, under Article 24 of the Law. We do not sell personal data.

Cookies are used for sign-in, remembering your city and language, and analytics (Google Analytics, Yandex Metrica in anonymised form). You can disable cookies in your browser; some features of the Service may then be unavailable.

Data is stored on servers in the Kyrgyz Republic. We use TLS 1.3 encryption, database encryption, access control, logging and regular PCI DSS audits. Application data is kept for 3 years after the last contact, account data until deletion, technical logs for 12 months.

Under Article 13 of the Law on Personal Data you may:

• obtain confirmation of processing and a list of your data;
• request correction, blocking or destruction of data;
• withdraw consent and unsubscribe from mailings;
• appeal the Administration's actions to the State Personal Data Protection Agency or a court.

Requests go to privacy@finmarket.kg or by post to the Administration's address; the response period is 7 business days.

The Service is intended for persons over 18. We do not knowingly collect data of minors; if such data is received, it is deleted at the first request of a legal representative.

We announce changes by publishing a new dated version. Material changes are additionally e-mailed to registered users.

Person responsible for personal data processing: Meerim Bekova
E-mail: privacy@finmarket.kg · Phone: +996 (312) 90-00-90
Address: 125 Toktogul St., Avangard Business Centre, 7th floor, Bishkek 720040